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2.5 Pedersen commitment (using discrete log). Finally, we give an example of a 
commitment scheme based on a specie number theoretic ... 
cs.nyu.edu/courses/fall01/G22.3033-003/lect/lecture14.ps - Similar 
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scheme of Pedersen [6], for the associated protocols and additional ... an integer 

commitment scheme, as well as a zero-knowledge protocol for prov- ... 

www.daimi.au.dk/~ivan/papers/gencommit.ps - Similar 
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Pedersen Commitment Scheme. Setup: receiver chooses... Large primes p and q 
such that q divides p-1 ; Generator g of the order-q subgroup of Zp* ... 
www.cs.utexas.edu/~shmat/courses/cs380s_fall08/17zk.ppt - Similar 
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Although A's commitment to p does not reveal anything, a commitment scheme like 
Pederson's would allow B to commit to p+1 just by seeing C(p). ... 
ocw.mit.edu/NR/rdonlyres/Electrical...and.../lec041603.pdf - Similar 
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Pedersen gave a semantical^ secure commitment scheme based on the difficulty of 

discrete logarithm problem, and proposed a VTSS scheme in the CRS model by ... 
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(Web site); We develop provably secure and efficient OCBE protocols for the 
Pedersen commitment scheme and comparison predicates as well as logical ... 
keywen.com/en/COMMITMENT_SCHEME - Cached - Similar 
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50, On the existence of statistically hiding bit commitment schemes and fail-stop 
signatures - Damgard, Pedersen, et al. - 1997 ... 
citeseer.ist.psu.edu/halevi96practical.html - Cached - Similar 
by S Halevi - 1 996 - Cited by 80 - Related articles - All 9 versions 
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Pedersen commitment scheme. Setup: Let q be a prime and let G = (g) be a q- 
element DL-group. Choose y uniformly from G \ {1} and set pk <- (g,y). ... 
www.cs.ut.ee/~swen/courses/crypto-ii/06-commitments.pdf - Similar 
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As in the case of Pedersen's commitment scheme [1 1], we see the scheme is 

computationally binding under the. DLA. 4. Equivocality and Extractability of the ... 

ietfec.oxfordjournals.org/cgi/reprint/E90-A/7/1 384.pdf - Similar 
by S Arita - 2007 - Cited by 1 - Related articles 
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But if we too use Pedersen's commitment scheme with the public generators g. 0. ,h. 
0 to commit to value a in this coin-flipping proto- ... 
www.springerlink.com/index/NEUARWBCBA4EW7YE.pdf - Similar 
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